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(57) Abstract 

An in-system programmable and verifiable (ISPAV) 
configuration restoring device (CROP device) has an Elec- 
trically Erasable and reprogrammable. Nonvolatile Inte- 
grated Storage array (e.g., a FLASH EE„NVIS anay) into 
which configuration instmctions may be written for later 
readout during configuration restoration of a Programmable 
Logic Device (PLD) where the PLD has a volatile con- 
figuration memory. The volatile PLD may be an FPGA 
or a CPLD. The ISPAV CROP device includes a shared 
shift register through which configuration instmctions read 
firom die EE_NVIS array are serially shifted out to a 
to-be--configured PLD. The shared shift register is also 
used for loading new configuration instructions into the 
EE_NVIS array by way of a 4-wirc interface such as JTAG 
and also for verifying proper writing of these instructions 
into the EE„NVIS array. 
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ELECTRICALLY ERASABLE AND REPROGRAMMABLE, NONVOLATILE 
INTEGRATED STORAGE DEVICE WITH IN- SYSTEM PROGRAMMING AND 
VERIFICATION (ISPAV) CAPABILITIES FOR SUPPORTING IN-SYSTEM 

RECONFIGURING OF PLD'S 

5 

RACKGROTTND 
1. Fip.ld of t-hP Tnvf^n^inn 

The invention is generally directed to in-system 
10 programming (ISP) of programmable logic devices (PLD's) , The 
invention is more specifically directed to nonvolatile memoir/ 
devices that support in-system reconfiguring of field- 
programmable gate array devices (FPGA*s) . 
2a. Cross RefRrennp to Rpla t^d Pahfint-F! 
15 The disclosures of the following U.S. patent (s) are 

incorporated herein by reference : 

(A) Pat. No. 5,212,652 issued May 18, 1993 to Om Agrawal 
et al, (filed as Ser. No. 07/394,221 on 8/15/89) and 
entitled, PROGRAMMABLE GATE ARRAY WITH IMPROVED INTERCONNECT 

20 STRUCTURE; 

(B) Pat. No. 5,621,650 issued April 15, 1997 to Om 
Agrawal et al, and entitled, PROGRAMMABLE LOGIC DEVICE WITH 
INTERNAL TIME-CONSTANT MULTIPLEXING OF SIGNALS FROM EXTERNAL 
INTERCONNECT BUSES; 

25 (C) Pat. No. 5,077,691 issued Dec. 31, 1991 to Haddad et 

al, and entitled, FLASH EEPROM ARRAY WITH NEGATIVE GATE 

VOLTAGE ERASE OPERATION; 

(D) Pat. No. 4,958,321 issued Sep. 18, 1990 to Chang; 

Chi and entitled, ONE TRANSISTOR FLASH EPROM CELL; and 
30 (E) Pat. No. 5,617,357 issued Apr. 1 , 1997 to Haddad et 

al, and entitled, FLASH EEPROM MEMORY WITH IMPROVED DISCHARGE 

SPEED USING SUBSTRATE BIAS AND METHOD THEREFOR. 

2b. CroFiR RpffiTf^npfi to Pplat-fid OMnpv Pnhl n rati nnfl 

The following publication (s) is/are believed to be 
35 related to the present application and is/are cited here for 

purposes of reference: 

(a) Xilinx Data Manual pages 6-1:6-10 entitled "XC1700D 

Family of Serial Configuration PROMs" (June 1, 1996) . 

3. Desrripl-inn of thfi P<=^1at-Pd A^r^ 
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Field- Programmable Logic Devices (FPLD's) have 
continuously evolved to better serve the unique needs of 
different end-users. From the time of introduction of simple 
PLD's such as the Advanced Micro Devices 22V10™ Programmable 
5 Array Logic device (PAL) , the art has branched out in several 
different directions and bloomed. 

One evolutionary branch of FPLD's has grown along a 
paradigm known as Complex PLD's or CPLD's, This paradigm is 
characterized by devices such as the Advanced Micro Devices 
10 MACH™ family. Examples of CPLD circuitry are seen in U.S. 
Patents 5,015,884 (issued May 14, 1991 to Om P. Agrawal et 
al.) and 5,151,623 (issued September 29, 1992 to Om P. 
Agrawal et al . ) . 

Another evolutionary chain in the art of field 
15 programmable logic has branched out along a paradigm known as 
Field Programmable Gate Arrays or FPGA's. Examples of such 
devices include the XC2000™ and XC3000™ families of FPGA 
devices introduced by Xilinx, Inc. of San Jose, California. 
The architectures of these devices are exemplified in U.S. 
20 Patent Nos. 4 , 642 , 487 ; 4 , 706 , 216 ; 4,713,557; and 4 , 758 , 985 ; 
each of which is originally assigned to Xilinx, Inc. 

An FPGA device can be characterized as an integrated 
circuit that has four major features as follows. 
(1) A user-accessible, configuration-defining memory means, 
25 such as SRAM, PROM, EPROM, EEPROM, anti-fused, fused, or 

other, is provided in the FPGA device so as to be at 
least once -programmable by device users for defining 
user-provided configuration instructions. Static Random 
Access Memory or SRAM is of course, a form of 
30 reprogrammable memory that can be differently programmed 

many times. Electrically Erasable and reprogrammable ROM 
or EEPROM is an example of nonvolatile reprogrammable 
memory. The configuration-defining memory of an FPGA 
device can be formed of mixture of different kinds of 
35 memory elements if desired (e.g., SRAM and EEPROM) 

although this is not a popular approach. 
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(2) Input /Output Blocks (lOB's) are provided for 
interconnecting other internal circuit components of the 
FPGA device with external circuitry. The lOB's' may have 
fixed configurations or they may be configurable in 

5 accordance with user-provided configuration instructions 

stored in the configuration-defining memory means. 

(3) Configurable Logic Blocks (CLB*s) are provided for 
carrying out user-programmed logic functions as defined 
by user-provided configuration instructions stored in 

10 the configuration-defining memory means. Typically, each 

of the many CLB's of an FPGA has at least one lookup 
table (LUT) that is user-configurable to define any 
desired truth table, --to the extent allowed by the 
address space of the LUT. Each CLB may have other 

15 resources such as LUT input signal pre-processing 

resources and LUT output signal post -processing 
resources . Although the term ' CLB ' was adopted by early 
pioneers of FPGA technology, it is not uncommon to see 
other names being given to the repeated portion of the 

20 FPGA that carries out user-programmed logic functions. 

The term, 'LAB' is used for example in Patent 5,260,611 
to refer to a repeated unit having a 4 -input LUT. 

(4) An interconnect network is provided for carrying signal 
traffic within the FPGA device between various CLB's 

25 and/or between various lOB's and/or between various lOB's 

and CLB's. At least part of the interconnect network is 
typically configurable so as to allow for programmably- 
defined routing of signals between various CLB's and/or 
job's in accordance with user-defined routing 

30 instructions stored in the configuration-defining memory 

means . 

In some instances, FPGA devices may additionally include 
embedded volatile memory for serving as scratchpad memory for 
the CLB's or as FIFO or LIFO circuitry. The embedded volatile 
35 memory may be fairly sizable and can have 1 million or more 



wo 99/3451 5 PCT/US98/27491 

4 

storage bits in addition to the storage bits of the device's 
configuration memory. 

Modern FPGA's tend to be fairly complex. They typically 
offer a large spectrum of user-configurable options with 
5 respect to how each of many CLE's should be configured, how 
each of many interconnect resources should be configured, 
and/or how each of many lOB's should be configured. This means 
that there can be thousands or millions of configurable bits 
that may need to be individually set or cleared during 
10 configuration of each FPGA device. 

Rather than determining with pencil and paper how each 
of the configurable resources of an FPGA device should be 
programmed, it is common practice to employ a computer and 
appropriate FPGA- configuring software to automatically 
15 generate the configuration instruction signals that will be 
supplied to, and that will ultimately cause an unprogrammed 
FPGA to implement a specific design. (The configuration 
instruction signals may also define an initial state for the 
implemented design, that is, initial set and reset states for 
20 embedded flip flops and/or embedded scratchpad memory cells.) 

The number of logic bits that are used for defining the 
configuration instructions of a given FPGA device tends to be 
fairly large (e.g., 1 Megabits or more) and usually grows 
with the size and complexity of the target FPGA. Time spent 
25 in loading configuration instructions and verifying that the 
instructions have been correctly loaded can become 
significant, particularly when such loading is carried out in 
the field. 

For many reasons, it is often desirable to have in- 
3 0 system reprogramming capabilities so that reconfiguration of 
FPGA's can be carried out in the field. 

FPGA devices that have configuration memories of the 
reprogrammable kind are, at least in theory, 'in-system 
programmable' (ISP). This means no more than that a 
35 possibility exists for changing the configuration 
instructions within the FPGA device while the FPGA device is 
'in-system' because the configuration memory is inherently 
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reprogrammable. The term, 'in-system' as used herein 
indicates that the FPGA device remains connected to an 
application-specific printed circuit board or to cinother form 
of end-use system during reprogramming , The end-use system is 
5 of course, one which contains the FPGA device and for which 
the FPGA device is to be at least once configured to operate 
within in accordance with predefined, end-use or 'in the 
field' application specifications. 

The possibility of reconfiguring such inherently repro- 

10 grammable FPGA's does not mean that configuration changes can 
always be made with any end-use system. Nor does it mean 
that, where in- system reprogramming is possible, that 
reconfiguration of the FPGA can be made in timely fashion or 
convenient fashion from the perspective of the end-use system 

15 or its users. (Users of the end-use system can be located 
either locally or remotely relative to the end-use system.) 

Although there may be many instances in which it is 
desirable to alter a pre-existing configuration of an 'in the 
field' FPGA (with the alteration commands coming either from 

20 a remote site or from the local site of the FPGA) , there are 
certain practical considerations that may make such in- system 
reprogrammability of FPGA's more difficult than first 
apparent (that is, when conventional techniques for FPGA 
reconfiguration are followed) . 

25 A popular class of FPGA integrated circuits (IC's) 

relies on volatile memory technologies such as SRAM (static 
random access memory) for implementing on-chip configuration 
memory cells. The popularity of such volatile memory 
technologies is owed primarily to the inherent reprogram- 

30 mability of the memory over a device lifetime that can 
include an essentially unlimited number of reprogramming 
cycles. 

There is a price to be paid for these advantageous 
features, however. The price is the inherent volatility of 
35 the configuration data as stored in the FPGA device. Each 
time power to the FPGA device is shut off, the volatile 
configuration memory cells lose their configuration data. 
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Other events may also cause corruption or loss of data from 
volatile memory cells within the FPGA device. 

Some form of configuration restoration means is needed 
to restore the lost data when power is shut off and then re- 
5 applied to the FPGA or when another like event calls for 
configuration restoration (e.g., corruption of state data 
within scratchpad memory) . 

The configuration restoration means can take many forms. 
If the FPGA device resides in a relatively large system that 

10 has a magnetic or optical or opto-magnetic form of 
nonvolatile memory (e.g., a hard magnetic disk) --and the 
latency of powering up such a optical/magnetic device and/or 
of loading configuration instructions from such an 
optical /magnetic form of nonvolatile memory can be 

15 tolerated-- then the optical/magnetic memory device can be 
used as a nonvolatile configuration restoration means that 
redundantly stores the configuration data and is used to 
reload the same into the system's FPGA device (s) during power- 
up operations (and/or other restoration cycles) . 

20 On the other hand, if the FPGA device (s) resides in a 

relatively small system that does not have such 
optical/magnetic devices, and/or if the latency of loading 
configuration memory data from such an optical/magnetic 
device is not tolerable, then a smaller and/or faster 

25 configuration restoration means may be called for. 

Many end-use systems such as cable -TV set tops, 
satellite receiver boxeis, and communications switching boxes 
are constrained by prespecified design limitations on 
physical size and/or power-up timing and/or security 

3 0 provisions and/or other provisions such that they cannot rely 
on magnetic or optical technologies (or on network/satellite 
downloads) for performing configuration restoration. Their 
designs instead call for a relatively small and fast acting, 
non-volatile memory device (such as a securely-packaged EPROM 

35 IC) , for performing the configuration restoration function. 
The small/fast device is expected to satisfy application- 
specific criteria such as: (1) being securely retained within 
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the end-use system; (2) being able to store FPGA 
configuration data during prolonged power outage periods; and 
(3) being able to quickly and automatically re -load the 
configuration instructions back into the volatile 
5 configuration memory (SRAM) of the FPGA device each time 
power is turned back on or another event calls for 
configuration restoration. 

The term 'CROP device* will be used herein to refer in 
a general way to this form of compact, nonvolatile, and fast- 

10 acting device that performs 'Configuration-Restoring On 
Power-up' services for an associated FPGA device. 

Unlike its supported, volatilely reprogrammable FPGA 
device, the corresponding CROP device is not volatile, and it 
is generally not 'in-system programmable'. Instead, the CROP 

15 device is generally of a completely nonprogrammable type such 
as exemplified by mask-programmed ROM IC's or by once-only 
programmable, fuse-based PROM IC's. Examples of such CROP 
devices include a product family that the Xilinx company 
provides under the designation 'Serial Configuration PROMs' 

20 and under the trade name, XC1700D™. These serial CROP 
devices employ one-time programmable PROM (Programmable Read 
Only Memory) cells for storing configuration instructions in 
nonvolatile fashion . 

It is to be noted as a slight digression here, that 

25 abbreviated terms such as 'PROM' (which may stand for: once 
Programmable Read Only Memory) , 'EPROM' (which may stand for: 
Eraseable and Programmable Read Only Memory) and 'EEPROM' or 
'E-squared PROM' (which may stand for: Electrically Erasable 
and reprogrammable Read Only Memory) bear historical 

30 connotations in the industry with respect to the physics 
employed therein for performing programming and erasure (if 
any) operations. Fair debate may take place as to what 
specifically each of these abbreviated terms means when found 
in a specific publication. 

35 In the following description, 'EPROM' shall be 

understood to refer to a nonvolatile form of integrated 
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Storage that relies on hot electron injection both for pro- 
gramming and erasure operations. 

The term 'integrated storage' as used herein implies 

storage circuitry that is monolithically included in an 
5 integrated circuit chip or at least manufactured using the 
fabrication techniques of integrated circuits. The term 
'integrated storage' excludes nonvolatile forms of storage 
such as magnetic disk, optical disk, and tape which rely on 
some form of mechanical motion for their operations, 
10 Further in the following description, 'EEPROM' or 'E- 

squared PROM* shall be understood to refer to a nonvolatile 
form of integrated storage that relies on Fowler -Nordheim 
(FN) tunneling both for programming and erasure operations. 
Additionally in the following description, 'FLASH' shall 

15 be understood to refer to a nonvolatile foarm of integrated 
storage that relies on Fowler-Nordheim (FN) tunneling for 
erasure operations and on hot electron injection for program- 
ming operations. 

To avoid confusion, the term 'NE_NVIS' (Not 

20 Electrically-erasable, Nonvolatile Integrated Storage) will 
be used herein to refer more generally to integrated devices 
which may be electrically programmed at least once to store 
data nonvolatilely but which may not be electrically erased. 
Thus, once-only programmable, fuse-based PROM IC's, and even 

25 the many- times programmable, UV-erasable PROM IC's all fall 
under the definition of 'NE_NVIS' because, although they are 
electrically programmable, they are not electrically- 
erasable. Mask-programmed ROM IC's do not because they are not 
electrically programmable. FLASH devices also do not fall 

30 under the definition of 'NE_NVIS' because they are 
electrically-erasable . 

The term 'NP_NVIS' (Not Programmable, Nonvolatile 

Integrated Storage) will be used herein to refer generally to 
integrated devices which store data nonvolatilely but cannot 
35 be electrically programmed even once nor electrically erased. 
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Mask -programmed ROM IC's are an example of NP__NVIS. Laser- 
programmed ROM IC's can be another example. 

The term 'EE_NVIS' (Electrically Erasable and 

reprogrammable, Nonvolatile Integrated Storage) will be used 
5 herein to refer generally to integrated devices which may be 
electrically programmed and electrically erased multiple 
times while storing data nonvolatilely between each 
programming and subsequent, if any, erasure operation. EPROM 
devices,. EEPROM devices, and FLASH devices all fall under the 

10 definition of 'EE^NVIS* as used herein. UV-erasable PROM IC's 
do not because they are not electrically erasable. 

Returning to the original topic, suppose it is desirable 
to reconfigure an in-the- field, FPGA system. Suppose further 
that configuration restoration relies on either a NP_NVIS 

15 form of CROP device (which is not reprogrammable) or an 
NE_NVIS form of CROP device (which is not electrically 
erasable) . In such a case, a commonly used procedure calls 
for physical removal of the original NP/NE_NVIS CROP device 
from the system and replacement with a substitute NP/NE_NVIS 

20 CROP device. The substitute CROP device contains the new FPGA 
configuration data that will be loaded into the FPGA device 
during the next restoration cycle. 

Even in cases where the original CROP device is a multi-^ 
reprogrammable NE_NVIS device, meaning that it is a repro- 

25 grammable device such as UV-erasable PROM, the original CROP 
device may still need to be physically removed from the 
system (or otherwise manually acted on) so as to provide for 
erasure (e.g., by way of exposure to UV radiation) and for 
reprogramming of the device (e.g., using voltages higher than 

30 can be withstood in- system) before the device is reintroduced 
back into the end-use system. 

The phrase, 'CROP rotation' will be used herein to refer 
to the act of changing the configuration data held within a 
CROP device irrespective of whether such a change is 

35 accomplished with or without replacement or other manual 
handling of the CROP device. 
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The phrase, .'physical CROP rotation* will be used herein 
to refer to the act of changing the configuration data held 
within a CROP device by way of physical substitution or other 
manual handling. 'In-field physical CROP rotation' will refer 
5 to physical CROP rotation that is carried out on an end-use 
system while the latter system is out in the field (as 
opposed to being brought back to a repair station for 
rework) . 

In- field physical CROP rotation is disadvantageous 
10 because the in- the -field handling (for replacement or 
reprogramming of the CROP device) tends to be costly and 
time-consuming. In some instances the in-system FPGA and/or 
the remainder of the end-use system needs to be shut-down 
during the CROP rotation operation. End-users are then 
15 deprived of the resources of the in-system FPGA and/or of the 
remainder of the end-use system during the operation. 

It would be beneficial to have an arrangement in which 
in-system reconfiguration of SRAM-based PPGA's or of other 
such volatile PLD's can take place without resorting to 
20 physical CROP rotation. 

.qTTMMAPV OF TKK TWRT^rTTDN 

An in-system programmable and verifiable (ISPAV) non- 
volatile memory device (CROP device) is provided in 
accordance with the invention for supporting SRAM-based FPGA's 

25 or of other such PLD's having volatile configuration memories . 

One embodiment of an ISPAV CROP device in accordance 
with the invention uses a serial interface such as a JTAG 
boundary-scan subsystem for configuration data down-loading 
and verification. A combination of a FLASH EE_NVIS array and 

30 a serial interface is provided within the ISPAV device for . 
enabling high-speed data down-loading, verification and 
output. The FLASH EE_NVIS array is a nonvolatile memory that 
relies on Fowler-Nordheim tunneling for providing electric 
erasability. 

35 One embodiment of an ISPAV device in accordance with the 

invention includes a protective housing for its circuitry 
where the housing has a relatively small number of interface 
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terminals such as 20 pins or less. An alternate embodiment 
comprises an MCM (Multi-Chip Module) inside of whose 
protective package there are provided both an ISPAV device in 
accordance with the invention and an associated SRAM-based 
5 FPGA chip or another PLD having volatile configuration 
memory . 

Other aspects of the invention will become apparent from 

the below detailed description. 

RRTKF DESCRTPTTON OF THE nRAWINriR 
10 The below detailed description makes reference to the 

accompanying drawings, in which: 

FIGURE 1 is a first block diagram provided for 

explaining a physical removal process that has been 

conventionally used for reconfiguration of in-system FPGA's; 
15 FIGURE 2A is a second block diagram provided for 

explaining an in-system programming and verifying process in 

accordance with the invention; 

FIGURE 2B is a third block diagram showing an MCM 

(Multi-Chip Module) embodiment of an in-system programmable 
20 and verifiable CROP/FPGA combination in accordance with the 

invention; 

FIGURE 3 is a schematic diagram illustrating one 
embodiment of an In-system Programmable and Verifiable 
(ISPAV) , Configuration-Restoring On Power-up (CROP) device in 
25 accordance with the invention that uses Flash memory for its 
Electrically Erasable and reprogrammable, Nonvolatile 
Integrated Storage (EE_NVIS) ; 

FIGURE 4 is a schematic diagram illustrating one 
embodiment of a shared shift register that may be used in the 
30 ISPAV CROP device of Fig, 3; 

FIGURE 5 is a flow chart showing a CROP rotation method 
in accordance with the invention; 

FIGURE 6A is a top plan view of a 14 -pin SOIC packaged, 
CROP device in accordance with the invention; 
35 FIGURE 6B is a top plan view of a 20-pin SOIC packaged, 

CROP device in accordance with the invention; 
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FIGURE 6C is a top plan view of a 20-pin PLCC packaged, 
CROP device in accordance with the invention; 

FIGURE 7 is a schematic diagram illustrating a first 
system with cascaded CROP devices of the invention; and 
5 FIGURE 8 is a schematic diagram illustrating a second 

system with cascaded CROP devices of the invention. 

DKTATT.ED D RRrPTPTTON 

Figure 1 shows a conventional arrangement in which a 
first a printed circuit board 100 or another form of end-use 

10 system has a volatilely-conf igurable FP6A device 120 embedded 
therein in a relatively non-removable manner. The relatively 
non- removable embedding can be by way of soldered connections 
or by another like coupling method which makes physical 
removal of the FPGA device 120 from the end-use system 100 

15 generally unappealing. Typically, the FPGA device 120 will be 
in the form of an IC package with a relatively large number 
of pins (e.g., more than about 50), 

For puzrposes of application-specific operation of the 
end-use system 100, the FPGA device 120 may be operatively 

20 intercoupled with additional in- system circuitry. Such 
additional circuitry is designated as 140 in Fig. 1 and the 
intercoupling is designated as 145. This operative 
intercoupling 145 of the FPGA device 120 and the additional 
in- system circuitry 140 may provide some necessary or 

25 desirable functionality of the end-use system 100 during 
normal operations of the end- use system. Alternatively, FPGA 
device 120 may by itself provide a necessary or desirable 
functionality of the end-use system 100. 

FPGA device 120 has a volatile configuration memory 125 

30 such as SRAM. A serial link 111 is provided for loading 
configuration instructions from an NP/NE_NVIS memory device 
110 (CROP device 110) into SRAM 125. CROP device 110 is 
inside an IC package that is separate from the IC package of 
FPGA 120. The IC package of CROP device 110 is removably 

35 inserted into an on-board socket 115. Socket 115 may be of 
the zero-insertion force (ZIF) type or of a like type of 
connector that allows the CROP device 110 to be removed in a 
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relatively convenient manner from the end-use system 100 and 
to be later re -inserted. In either case, socket 115 consumes 
space and adds to system cost while potentially reducing 
security. The relatively easy removability of the CROP device 
5 110 is to be contrasted with the relative non- removability of 
FPGA device 120. A double -headed arrow symbol 180 is included 
in Fig. 1 to indicate the removability and re-insertability 
of memory device 110 from/into end-use system 100. 

In the illustrated system of Fig. 1, CROP device 110 is 

10 assumed to be a UV- erasable PROM form of NE_NVIS device (Not 
Electrically-erasable, Nonvolatile Integrated Storage device) 
having a serial interface 111 and a power-up detecting 
interface 107. It is further assumed that, in a first 
instance, the UV-erasable PROM device 110 (CROP device 110) 

15 is already programmed to contain configuration instructions 
for loading into SRAM 125 of FPGA 120, 

When switch 105 is actuated into a closed position to 
thereby apply power to system 100, the power-up detecting 
interface 107 of the serial PROM device 110 detects the 

20 power-up sequence. At an appropriate time during the power-up 
sequence, the serial PROM device 110 outputs its contained 
configuration instructions through serial link 111 into SRAM 
125. The FPGA 120 is in a power-up loading mode at this time. 
It is understood that the power applied to end-use system 100 

25 includes an appropriate voltage Vj^^^ as indicated at 104 for 

enabling reading of data out of the serial PROM- device 110 . 

After proper in- loading of configuration instructions 
into SRAM 125, FPGA 120 switches into a normal operations 
mode and becomes ready to either function on its own in 

30 accordance with the in-loaded configuration instructions or 
to operatively cooperate with the additional in- system 
circuitry 140 by way of intercoupling 145. This process of 
reloading configuration data into FPGA 120 is repeated each 
time switch 105 cycles through a power-up sequence. 

35 Assume that, in a second instance, it is desirable to 

alter the configuration instructions stored in serial PROM 
device 110 so that FPGA device 120 will behave differently 
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after a. next power-up sequence. In this second instance, 
physical CROP rotation is employed. The serial PROM device 
110 is physically removed from the in-system socket 115 and 
transferred (180) to. the socket 155 of an out-of -system 
5 programmer/ verifier 150. The so-transferred serial PROM 
device is now referenced as 110*. The out-of -system 
programmer/verif ier 150 is either a portable device that has 
been brought to an in-field location of system 100 or the 
serial PROM device 110 has been brought to the location of 

10 the programmer/verif ier 150. 

The out-of -system programmer/verifier 150 includes an 
ultraviolet source 157 for erasing the configuration 
instructions previously stored in UV-PROM 110*. Symbol 156 
represents blanket erasure by UV rays, 

15 After erasure completes, new configuration instructions 

are downloaded by way of link 170 into a temporary memory 
buffer 160 of programmer/verif ier 150, The downloaded 
instructions are then transferred from temporary memory 
buffer 160 into the serial PROM device 110' by way of link 

20 165. It is understood that the power applied to 
programmer/verifier 150 includes one or more appropriate 
voltages, ^program ^® indicated at 159 for enabling writing 

of new data into the serial PROM device 110*. In older 
configurations, the out-of -system programmer/verifier 150 may 
25 include a dual polarity, high voltage circuitry (e.g., -12V 
and +12V) for reprogramming device 110*. In such cases, the 
end-use system 100 may lack means for providing the one or 
more appropriate voltages, Vpj^Q^j^^ needed for reprogramming 

device 110 * . 

30 After the programming operation completes, link 165 may 

be used to compare the data that has been programmed into 
serial PROM device 110' against the data downloaded into 
temporary memory 160. This is done to verify that the new 
configuration instructions have been correctly programmed 

35 into device 110'. 

After out-of -system programming and verification 
completes, the re-programmed PROM device 110' is transferred 
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(180) back to the original system -and re-inserted into socket 
115. The end-use system that contains the re-programmed PROM 
device 110' is now referenced as 100' because it will behave 
differently in accordance with the new instructions in the 
5 re-programmed PROM device 110'. During a next power-up of 
end-use system 100', the new configuration instructions 
within the re-programmed PROM device 110* will be loaded via 
link 111 into configuration memory 125. FPGA 120 will then 
behave in accordance with the new configuration instructions. 

10 With respect to the just described process of physical 

CROP rotation, it should be noted that during the time in 
which the serial PROM device 110 is out of the system socket 
115, it is often necessary or prudent to shut off the power 
to FPGA device 120, and generally also to its interoperative 

15 circuitry 140. One drawback of , this is that end-users of 
system 100/100' are deprived of the functionality of FPGA 
120, and perhaps of its associated circuitry 140. The 
deprivation will last at least for the duration of the 
physical CROP rotation. 

20 Other drawbacks of the above-described, physical CROP 

rotation method are the cost and manual labor involved in 
moving the serial PROM device 110 back and forth between the 
end-use system 100 and the out-of -system programmer/verifier 
150. Also, there is the danger that device 110 may be damaged 

25 during the physical transfer 180. 

Fig. 2A is a block diagram of an improved FPGA-based 
system 200/200' in accordance with the invention. Like 
reference symbols and numbers in the '200' centuiy series are 
used for elements of Fig. 2A which correspond to but are not 

30 necessarily the same as the elements represented by similar 
symbols and reference numbers of the *100' century series in 
Fig. 1. As such, an introductory description of the elements 
found in Fig. 2A is omitted here. 

An improved CROP device 210 is provided within the 

35 correspondingly improved system 200/200'. Unlike removable 
NE_NVIS device 110 of Fig. 1, the improved CROP device 210 
may be arranged such that it is not easily removable from 
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system 200/200' . For example, improved CROP device 210 may be 
soldered into place on a printed circuit board of system 
.200/200'. (Alternatively, provisions for easy removability 
such as placement in a socket could be made if desired. Note 
5 however, that elimination of socket 115 reduces system costs 
and frees the space previously consumed by socket 115 . ) 

More importantly, the improved CROP device 210 is in- 
system programmable and verifiable (ISPAV) while retaining a 
relatively small footprint in the improved system 200/200'. 

10 The phrase, 'in-system programmable and verifiable' or 

'ISPAV as used herein indicates that, old data may be 
. electrically-erased, new configuration- data may be programmed 
into the improved CROP device 210 while the device 210 
remains coupled to the end- use system 200/200' and that 

15 proper programming of the improved CROP device 210 may also 
be verified while the device 210 remains coupled to the end- 
use system 200/200'. Device 210 is therefore referred to as 
an ISPAV CROP device. 

As before, CROP device 210 is defined for the embodiment 

20 of Fig. 2A as a compactly packaged, integrated circuit with 
a relatively small number of package pins such as 20 or less. 
An Electrically Erasable and reprogrammable. Nonvolatile 
Integrated Storage array (EE_NVIS array) 214 is provided 
within the ISPAV CROP device 210. 

25 EE_NVIS array 214 may be an EEPROM array whose erase and 

programming operations both rely on Fowler-Nordheim 
tunneling. In a preferred embodiment however, array 214 is a 
FLASH memory array whose erase operations rely on FN 
tunneling and whose programming operations rely on hot 

30 electron injection. There are several advantages to using 
FLASH technology instead of EEPROM technology. First, FLASH 
memory technologies tend to provide comparatively greater 
storage density as measured on a transistors-per-logic-bit 
basis. In one embodiment, each FLASH cell has dimensions of 

35 approximately one to two square microns or less. A stacked 
gate, double polysilicon layer process is used to form 
compact floating gate transistors for defining the FLASH 
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cells, (Multi-level charge storage may be used for each such 
cell wherein the charge stored in the floating gate of each 
transistor can represent one of 4 or more logic states, e.g. 
00, 01, 10, 11.) Flash memories for storing at least as many 
5 as 1 MegaBit of data may be conveniently incorporated within 
the integrated circuit chip of the CROP device 210. When 
submicron technologies are used and/or multi-level charge 
storage technologies are used, it is possible to incorporate 
within the integrated circuit chip of the CROP device 210, 

10 a flash memory capacity of 4 MegaBits of data or 8 MegaBits 
of data or more . 

A second reason for preferred use of FLASH memory is 
that FLASH memory technology tends to provide a greater 
number of reprogramming cycles over device lifetime than does 

15 EEPROM technology. Typically, a FLASH array will be able to 
endure at least 100,000 reprogramming cycles or more over its 
lifetime. Older EPROM or EEPROM technologies may not be able 
to assuredly handle more than about 1, 0 00 reprogramming 
cycles over device lifetime. Thus the endurance of FLASH 

20 memory technology tends to be orders of magnitude greater 
than the endurance of the older EPROM or EEPROM technologies. 
This is important because the SRAM-based FPGA device 220 
that is associated with the ISPAV CROP device 210 is expected 
to be indefinitely reprogrammable . Such long term reprogram- 

25 mability loses part of its value if the companion CROP device 
210 does not have comparable endurance, (Of course the CROP 
device 210 is not expected to be reprogrammed as often as the 
FPGA device 220. Nonetheless, some system designs may call 
for much more than 1,000 reprogramming cycles for the CROP 

30 device over the expected lifetime of the system. 

A third reason for preferred use of FLASH memory is that 
FLASH arrays may be reprogrammed using relatively low 
voltages and/or power draws. On-chip charge pumps or the like 
enable some FLASH arrays to operate at low power while 

35 drawing their energy from chip-external, monopolarity power 
supplies that provide only. say, +5V or +3.3V or +2.2V or 
+1.8V. 
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A serial interface circuit 217 is provided within CROP 
device 210. The serial interface circuit 217 is 
bidirectionally coupled to the EE_NVIS array 214 as indicated 
by coupling 216. The serial interface circuit 217 further has 
5 serial links 270 and 271 for supporting JTAG-based or other, 
serial receipt of configuration data and serial transmission 
of test data. As used herein, 'JTAG* refers at least to IEEE 
standard 1149.1 as was effective at least in the year 1996. 
During a general configuration restoration mode of 

10 device 210, which may occur for example when a power-up 
sequence (205) is detected by a power-up detecting interface 
207 of the ISPAV CROP device 210, configuration-restoration 
takes place as follows. The power-up detecting interface 207 
responsively initiates a data transfer upon detecting the 

15 power-up sequence. Configuration instructions that had been 
previously stored within the EE_NVIS array 214 are passed 
through internal link 216 to the serial interface 217 and 
from there by way of serial link 211 into the SRAM 225 of 
FPGA device 220. 

20 Note that FPGA device 220 may include configurable 

registers and/or embedded memory 226 in addition to 
configurable SRAM 225. Configuration instructions may be 
.directed to establishing initial states in the configurable 
registers 226, and/or establishing initial states in embedded 

25 memory --which memory may be considered an extension of or an 
alternative for the configurable registers 226-- as well as, 
or in addition to the establishing of an initial 
configuration state in the configuration memory 225. 
Accordingly, when reconfiguration of FPGA device 220 is 

30 discussed here and below, it is understood to contemplate any 
one or more of: {l) establishing of an initial configuration 
state in the configuration memory 225, {2} establishing 
initial states in the configurable registers 226, and {3} 
establishing initial states in the embedded memory 226. The 

35 EE__NVIS array 214 will of course have sufficient memory 
capacity for storing the corresponding configuration data for 
the configuration memory 225, and if applicable, for storing 
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the corresponding initial configuration data for one or both 
of the configurable registers 22 6 and the embedded memory 
226. This may call for an EE_NVIS array 214 that stores at 
least 2Mb or at least 4Mb or at least 8Mb of data, where 1Mb 
5 corresponds to one megabits of storage data. 

During a programming mode of device 210, new 
configuration instructions are downloaded by way of serial 
link 270 into serial interface 217 and through internal link 
216 into EE_NVIS array 214. 

10 In a subsequent verification mode of device 210, the 

data that had been programmed into EE_NVIS array (e.g., FLASH 
array) 214 is passed back through internal link 216 and 
through serial interface 217 for output on serial 
verification line 271. The data on serial verification line 

15 271 can then be compared against the data initially 
downloaded on serial -input line 270 to make sure that EE_NVIS 
array 214 had been properly programmed. If not, programming 
may have to be tried again, with or without prior erasure, 
until the desired data pattern is verified as having been 

20 correctly established in the EE_NVIS array 214. 

In one embodiment, serial verification line 271 forms a 
serial part of a JTAG boundary- scanning chain that further 
includes JTAG-linking line 275a and an interposed, JTAG 
boundary- scanning section 247a of a first in- system, circuit 

25 section 240a. Such inclusion of the serial interface 217 and 
its associated serial lines, 270 and 271, within the JTAG 
serial chain of JTAG boundary- scanning section 247a helps to 
reduce the overall system costs for supporting the in-system 
programming and verification (ISPAV) capabilities of CROP 

30 device 210. 

In an alternate embodiment, lines 270 and 271 are merged 
to define a bi-directional serial link where configuration 
data is received and test data is output over a same line. 
The embodiment shown in Fig. 2A assumes that the JTAG 

35 serial chain formed by CROP device 210 and first in-system, 
circuit section 240a can operate in a JTAG test mode even 
while other parts of the end-use system 200/200' function in 
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a normal operational mode. More specifically, the system is 
designed so that FPGA 220 can remain operational on its own 
or cooperate with- a second, in-system circuit portion 240b 
while EE_NVIS array 214 is undergoing re -programming and 
5 verification. To this end, a mode control module 230 is 
provided with independent control outputs 231 and 232. 
Control output 231 selectively activates or deactivates the 
JTAG serial mode of in-system sections 210 and 24 0a. Control 
output 232 selectively and independently activates or de- 

10 activates the JTAG serial mode of in-system sections 220 and 
240b. A periphery 227 of the FPGA device, as identified by a 
dashed outer portion of box 220 of Fig. 2A, represents the 
JTAG boundairy scanning portion of FPGA device 220. The JTAG 
serial chains of the illustrated units may be driven 

15 simultaneously in series or in parallel in accordance with 
boundary scanning techniques known in the art. 

A mode command line 235 within system 200/200' supplies 
appropriate mode command instructions to module 230 for 
putting one or the other or both of control lines 231 and 232 

20 into test or operational modes. The second, in-system circuit 
section 240b may be coupled to in-system circuitry section 
240a by way of operational coupling 246. Operational coupling 
246 becomes active when both of in-system circuit sections 
240a and 240b are in normal operational modes. 

25 Given that FPGA 220 can remain functional and 

cooperative with the second in-system circuitry section 240b 
even while EE_NVIS array 214 is being re -programmed and 
verified, it should be apparent that down time for FPGA 220 
and its associated circuitry 240b during FPGA reconfiguration 

30 can be kept to a minimum. The down time of FPGA 220 may be no 
more than the time it takes to output, pre-verified 
configuration instructions from EE_NVIS array 214 through 
internal link 216 and through serial interface 217 to the 
SRAM 225 by way of serial link 211. CROP rotation can take 

35 place while FPGA 220 and the second in-system circuitry 
section 240b remain on line and while CROP device 210 remains 
in-system. 



wo 99/34515 PCT/US98/2749I 

Fig. 2B is a block diagram showing an MCM (Multi-Chip 
Module) embodiment of an in- system programmable and 
verifiable CROP/FPGA combination in accordance with the 
invention. It is substantially the same as the embodiment of 
5 Fig. 2A with the exception that both of an integrated circuit 
substrate forming the ISPAV CROP device (B210) and an 
integrated circuit substrate forming the FPGA device {B220) 
are housed and intercoupled within a Multi-Chip Module (MCM) 
201. Where practical, like reference symbols in the *B200' 

10 century series are used for elements of Fig. 2B which 
correspond to those of Fig. 2A bearing numbers in the '200' 
century series. Element B226 represents configuration-time 
loadable, embedded memory within FPGA device B220. Line B233 
carries JTAG or other serial test data out of FPGA device 

15 B220 for output through line B271. Serial interface circuit 
B217 has the ability to short-circuit FPGA device B220 out of 
the serial test data loop so that reprogramming and 
verification of EE_NVIS array B214 can take place even while 
FPGA device B220 remains in an operational mode wherein it 

2 0 cooperates with in-system circuitry section 240b. 

An advantage of the MCM embodiment B200 is that greater 
compaction of circuitry is achieved by integrating units B210 
and B220 into a single MCM package. A disadvantage is the 
cost of integrating two different kinds of fabrication 

25 process technologies (e.g., the FLASH technology of B214 and 
the SRAM technology of B225) into a single manufacturing 
line . 

Referring next to Fig. 3, details of a preferred 
architecture for an ISPAV CROP device 310 in accordance with 

30 the general structure 210 of Fig. 2A will be described. Where 
practical, like reference symbols in the '300' century series 
are used for elements of Fig. 3 which correspond to but are 
not necessarily the same a those of Fig. 2A bearing numbers 
in the '200* century series. 

35 Fig, 3 is a schematic of an integrated circuit chip 310 

formed using a monolithic semiconductor substrate or the like 
and having interface terminals 301-304, 306-309, 311, 313, V 
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and GND for communicating, with circuitry outside of the 

substrate. Multi-substrate implementations such as MCM are of 
course, alternatively possible. 

Integrated circuit 310 includes an on-chip, FLASH 

5 EE_NVIS array 314 having at least 2^ addressable storage 
locations that are respectively addressed by way of an n-bits 
wide, parallel, address -receiving input port A^^^. An address 

sequencer or counter 312 that is also at least n-bits wide, 
is further provided in device 310 for driving the address - 
10 receiving input port, A^^^ of the FLASH array 314. The integer 

n is preferably at least equal to 8 or more (2^= 256) . The 

integer n is more preferably at least equal to 16 or more (2 

"^^^ 65,536) and yet more preferably at least equal to 20 or 

more (2^^= 1,048,576= IM) . The specific value of n will vary 
15 depending on the storage depth and width configuration of the 
FLASH array 314. A 4Mb FLASH array 314 for example, may be 
2 0 

organized as 2 storage words with each such individually- 
addressable storage word being 4 bits wide. Alternatively, a 

4Mb FLASH array may be organized as 2 storage words with 
20 each such individually-addressable storage word being 8 bits 
wide. In yet another alternative embodiment, the 4Mb FLASH 

18 

array may be organized as 2 storage words with each such 
individually- addressable storage word being 16 bits wide. In 
a further alternative embodiment, the 4Mb FLASH array may be 
17 

25 organized as 2 storage words with each such individually- 
addressable storage word being 32 bits wide. Although memory 
array 314 is referred to herein according to its preferred 
technology, namely, FLASH; other forms of EE_NVIS such as 
EEPROM are of course also within the contemplation of the 

30 invention. 

The addressable storage locations of FLASH array 314 are 
each at least m-bits wide and the data of an addressed one of 
such storage locations is output from a corresponding data 
output port, Do^t- of the FLASH array 314. The integer m is 
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preferably at least equal to 4 and more preferably at least 
equal to 8 or more and even more preferably at least equal to 
16. or 32 or more. The specific value of m will vary depending 
on the storage depth and width configuration of the FLASH 
5 array 314. Larger values of m tend to reduce the rate at 
which address counter 312 needs to be clocked in order to 
achieve a desired output bandwidth (measured in bits per 
second, or b/S) from the FLASH array 314. Larger values of m 
also tend to increase the allowable , read latency of FLASH 
10 array 314 as measured from presentation of a valid address 
signal at the A^^ port (328) to the responsive output of 

correspondingly valid data at the D^^^ port. 

In one embodiment, the average output bandwidth from 
FLASH array 314 is at least about 12Mb/S to 16Mb/S, as 

15 measured in Megabits per second. This translates to an 
allowable read latency of no greater than about m times 80nS 
(nanoseconds) to m times 62nS. Naturally, as the integer m 
becomes- larger, the read-time latency ceiling for FLASH array 
314 advantageously becomes higher and higher. 

20 The total data storage capacity of the FLASH array 314 

should be at least 1Mb (one Megabit, or 1,048,576 bits), and 
more preferably at least 2Mb, and even more preferably at 
least 4Mb or 8Mb. 

A clock divider 312a may be provided between SCLK line 

25 301 and the clock input of address counter 312 for dividing 
SCLK by m or a larger value so that counter 312 after m or 
more pulses of SCLK have been delivered to a next -described, 
shared shift register 317. Clock divider 312a may provide a 
phase shifting function as well as a frequency changing 

30 function so that memory read operations can overlap in time 
with shift operations of the shared shift register 317. The 
divide and/or phase shift amounts provided by the clock 
divider 312a may be made user-configurable if desired, with 
the specific configuration being in- loaded via a below- 

35 described, 4-wire interface (306-309) . 

The shared shift register 317 is at least m-bits wide, 
and is additionally provided in device 310 so as to be 
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coupled to receive a corresponding m-bits of data from the 
data output port, D^^^ FLASH array 314. In one 

embodiment, data output port Dq^^- is an m-bits wide parallel 

output port and corresponding coupling 316a from data output 
5 port D^^^ to shared shift register 317 is an m- lines wide 

parallel bus. Once m-bits of valid D^^^ data are latched into 

register 317, the FLASH array 314 can begin altering the 
levels on its D^^^ port (flipping to the temporary data 

invalid state) as a next memory fetch cycle begins. This 
10 means that memory access operations can occur 
contemporaneously with serial shift operations of the shared 
shift register 317. 

The shared shift register 317 is further coupled to 
supply m-bits of data to a data input port D^^ of the FLASH 

15 array 314. In one embodiment, data input D^^^ is an m-bits 

wide parallel input port and corresponding coupling 316b is 
an m-lines wide parallel bus. In the case where data output 
port, Dq^^ and data input port D^^^ of FLASH array 314 are 

both m-bits wide parallel ports, data can be quickly 

20 transferred back and forth in parallel between the shared 
shift register 317 and the FLASH array 314. In an alternate 
embodiment, FLASH array 314 may have a single, bidirectional 
data port that transfers m-bits wide data in parallel for 
respective reading and writing operations, 

25 A JTAG/ISPAV control engine 320 is further provided on 

chip 310. The JTAG/ISPAV engine 320 includes a first serial 
coupling 370 for serially loading data into the shared shift 
register 317 and a second serial coupling 371 for serially 
shifting data out of register 317. Link 365 controls the 

30 operating mode of the shared shift register 317, Link 366 
provides coordination between operations of the JTAG/ISPAV 
engine 320 and a soon-described, decode logic section 350. 

JTAG/ISPAV engine 320 includes a respective set of JTAG- 
compatible inputs: 306 (TDin) , 307 (TSqlk) ^'^^ 308 (TMsel) 

35 for respectively receiving serial test data input, a test 
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subsystem clock, and test mode selection control signals. 
These inputs are sometimes alternatively referenced as TDIN, 
TCLK and TMS. JTAG/ISPAV engine 320 further includes a serial 
output 309 (TDout) for outputting serial test data. The 
5 latter is sometimes alternatively referenced as TDOUT. The 
combination of TDIN, TCLK TMS and TDOUT may define a 4 -wire 
interface. In an alternative embodiment, the interface of the 
four chip pins: 306, 307, 308 and 309 may be in accordance 
with serial scanning subsystems other than industry standard ,^ 

10 JTAG protocols, where the alternate scanning subsystems may 
be as otherwise adopted by industry for implementing in- 
system testing. Such test subsystems are often generically 
referred to in the art as boundary scanning subsystems. In 
one embodiment, the data transfer rate of the 4 -wire 

15 interface (306-309) is around lOMb/S or less. On the other 
hand, it could be larger. 

A clock-selecting multiplexer 360 is further provided in 
device 310 for driving; a clock input of the shared shift 
register 317. A serial clock input (SCLK) 301 of chip 310 

20 couples to both the clock input of address counter 312 (via 
divider 312a) and a first selectable input 361 of the clock- 
selecting multiplexer 360. A second selectable input 362 of 
multiplexer 360 receives the TScLK signal (307) . Selection 
control terminal 364 of multiplexer 360 receives a selection 

25 control signal from JTAG/ISPAV engine 320 for determining 
whether the signal on first input 361 or on second input 362 
should be selectably applied to the clock input of the shared 
shift register 317. Clock-selecting multiplexer 360 may have 
further selectable inputs, if desired, such as 363 for 

3 0 driving the shared shift register 317. One possibility is to 
receive alternate clock signals on input 363 from an on-chip 
phase locked loop (PLL) , which unit is shown at 330. PLL unit 
330 may lock onto external clocks such as SCLK, TS^-j^j^ or 

others (X_CLK) and may operate at a different frequency as 
3 5 may be desired for clocking shared shift register 317 at a 
given time interval. Multiplexer 332 is shown supplying these 
various external clock signals to PLL 3 30 with selection 
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being under control of the JTAG/ISPAV engine 320. The clock 
multiplying and phase shifting characteristics of PLL unit 
330 may also be under control of the JTAG/ISPAV engine 320. 
The JTAG/ISPAV control engine 320 asserts selection 
5 control signals onto control terminal 364 in accordance with 
mode instructions provided by received test mode selection 
control signals 3 08 and/or further mode controls supplied 
from decode logic section 350 by way of bus 366, 

An active-low, chip-select signal (/CS) 302 is supplied 

10 by one of the external pins of chip 310 to chip-internal 
decode logic 350. When signal 302 is active (low), it causes 
decode logic circuit 350 to apply an active clock-enable 
signal (CLKEN) 322 to address counter 312. This enables 
address counter 312 to begin counting in synchronism with the 

15 SCLK signal of terminal 301. 

When the /CS signal 302 is inactive (high) , address 
counter 312 is disabled from counting. An inactive (high) /CS 
signal 302 also causes decode logic 350 to place an output 
311 of an on-chip, tristate output driver 319 into a high 

20 impedance output mode. This is accomplished by way of output- 
enable (OE) line 323. The inactive (high) state of /CS signal 
302 also causes decode logic 350 to send a standby mode 
signal to IC power control section 355. Power control section 
355 then responsively puts the IC chip 310 into a low power 

25 (low Ice) standby mode. 

Output -enable pin 303 (OE/RST) of the IC is a dual 
function pin with programmable polarity. Exclusive OR gate 
324 receives the OE/RST signal at a first input and 
determines which of the dual functions: OE and RST (Reset) 

30 will be active high while the other is active low. Non- 
volatile memory bit 304 connects to a second input of 
exclusive OR gate 324 to determine polarity. A logic '0* on 
output line 325 of the exclusive OR gate resets the address 
counter 312 and forces line 323 (tristate OE) into an output 

35 disabled mode, which then forces tristate driver 319 into the 
high impedance output mode. A logic '1* on control line 325 
permits the address counter 312 to count and also permits 
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(but does not necessarily cause) line 323 to go into an 
active output-enable mode. The /CS line 302 needs to be also 
active for line 323 (OE) to go into an active output -enabling 
mode . 

5 A logic '0' on control line 325 also forces AND gate 326 

.to output an active -low, cascading signal /CAS^^^ onto line 

313. The /CASq^^ signal (313) may be coupled to the /CS input 

(302) of a second CROP device such as 310. 

The /CASout line 313 also may go into an active low 

10 state when decode logic section 350 detects that address 
counter 312 has reached a maximum value. The next CROP device 
in a cascaded daisy chain (if any) is thereby informed that 
the data space of FLASH array 314 in the present chip 310 has 
been exhausted and the next CROP device may begin to output 

15 the respective configuration data of its address space. 

The serial output (Sout) pin 311 of the integrated 
circuit chip 310 corresponds to line 211 of Fig, 2A. The 
output of tristate driver 319 is placed in the high impedance 
mode if either of /CS or /(OE/RST) is inactive. During 

20 programming and verification of the FLASH array 314, pin 311 
may be used to place the chip in one of the program or verify 
modes (P/V) . This second use of pin 311 is indicated by input 
path 368 linking into JTAG/ISPAV engine 320. 

Control line 327 (emanating from decode logic 35 0) may 

25 be used to place the FLASH array 314 in the appropriate one 
of a read mode, a write mode, and an erase mode (R/W/E) . 
FLASH -technology based erasing allows the non-volatile memory, 
cells of array 314 to be quickly erased prior to programming. 
During programming of the FLASH array 314, the new data 

30 is introduced into the chip by way of TDin pin 306 in 
synchronism with the test subsystem clock on line 307. Dashed 
path 369 indicates the transmission of the serial data during 
the programming mode into serial link 370 for temporary 
storage in the shared shift register 317. The serially- 

35 introduced new data is then parallel loaded into the D^^ data 

input of FLASH array 314 by way of path 316b. During 

1 
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programming, multiplexer selection control 364 selects input 
362 so that the shared shift register operates in synchronism 
with the clock on line 307. (Alternatively, input 363 could 
be selected if the PLL 330 is then operating in synchronism 
5 with the TS^^^j^ clock signal on line 307.) SCLK 301 advances 

address counter 312 to a next address at the completion of 
each write operation. (Alternatively, PLL 330 could be used 
to control advancement of address counter 312 in synchronism 
with TS^^j^ but at a frequency which is much lower.) 

10 During verification (after programming) , the address 

counter 312 is reset and its count output 328 is incremented 
in synchronism with the SCLK signal on line 301. The 
corresponding data output (D^^^) of the FLASH array 314 is 

loaded via bus 316a into shared shift register 317. Then, the 

15 same data is serially off-loaded in synchronism with the test 
subsystem clock (307) by way of serial path 371 to test data 
output pin 309. Dashed line 372 represents the serial passage 
of this data through the JTAG/ISPAV engine 320 during the 
verification mode. As with programming, the shared shift 

20 register 317 should be serially shifting its data at a rate 
that is faster than that of the address advancing clock 3 01 
applied to address counter 312. 

Fig. 4 is a schematic of one implementation 317' of the 
shared shift register of Fig. 3. Implementation 317' allows 

25 for both serial and parallel inputting and outputting of data 
by way of the shared . shift register. Where appropriate, 
similar reference numbers corresponding to elements in Fig. 3 
are used, in Fig. 4. Thus, JTAG/ISPAV engine 320' operates 
selection control terminal 364' of multiplexer 360* to select 

30 one of the clock signals on lines such as 361' and 362'. 
(Optional input 363' is not shown to avoid illustrative 
clutter.) Serial data is transferred by way of line 370' into 
the shared shift register 317' from the JTAG/ISPAV engine 
320'. Serial data is transferred by way of line 371' from the 

35 shared shift register 317' to the JTAG/ISPAV engine 320'. 
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. The illustrated implementation of shared shift register 
317' includes a. plurality of D-type registers, 420, 421, 422, 
429 and a corresponding plurality of D-feeding 
multiplexers 410, 411, 412, 419. The number of such D- 

5 type registers 420-429 and D-feeding multiplexers 410-419 is 
at least the same as m (or m'+l) so that data may be parallel 
transferred between register 317' and the m-bits wide data 
ports (Dj^ and D^^ip) of FLASH array 314. 

Referring to D-feeding multiplexer 410, a first 

10 selectable input receives serially-transferred data such as 
from line 370' while a second selectable input receives 
parallel-wise transferred data such as from line 316a0. The 
signal on line 316a0 represents a corresponding bit from the 
^out P^^^ FLASH array 314. Control line 365a' carries a 

15 data-flow control signal from JTAG/ISPAV engine 320* for 
directing the D-feeding multiplexer 410 and the subsequent D- 
feeding multiplexers 411-419 to each select either the 
serially-transferred data or the parallel-wise transferred 
data for feeding into the D input of a respective one of D- 

20 type registers 420-429. Line 470 carries the serially- 
transferred data for D-feeding multiplexers 411. Control line 
3 65b' carries a clock- enable control signal from JTAG/ISPAV 
engine 320' to all of D-type registers 420-429 for 
selectively enabling the responsiveness of the D-type 

25 registers 420-42 9 to the clock signal output by clock 
selector 360'. The JTAG/ISPAV engine 320' actuates control 
lines 365a' and 365b' in accordance with the respective modes 
of operation desired at each given moment. 

The Q output of each of D-type registers 420-429 couples 

30 by way of a corresponding one of parallel bus lines 316b0- 
316bm' to the D^^^^ port of FLASH array 314. The bit 

significance of 316b0-316bm' and 316a0-316am' can of course, 
run low-to-high or high-to-low depending on the shift 
protocol used by the boundary scanning circuits. 
35 The Q output of each of D-type registers 420 through, 

but not including, 429 also couples to the next succeeding D- 



wo 99/3451 5 ^ PCT/US98/27491 

feeding multiplexer as shown. The Q output of the last D-type 
register 429 of the string drives the input 318* of the 

line driver 319 (Fig, 3). It also drives line 371'. 

Other implementations for the shared shift register are 
5 of course possible based on other types of registers (e.g., 
JK, T, etc.). It is understood that one of the decode logic 
section 350 and JTAG/ISPAV engine 320 can also otherwise 
drive common controls of the registers 420-429 such as clock- 
enable (365b'), set and reset (not shown) as deemed 
10 appropriate. 

Referring to Fig. 5, a reconfiguration method 500 in 
accordance with the invention comprises the following steps. 

Entry is made at step 501. At step 505 the FLASH EE_NVIS 
array 314 of Fig. 3 is FLASH-erased . At step 508 the address 
15 counter 312 is initialized either by resetting or by 
otherwise establishing an initial address in the counter 312. 
Shared shift register 317 is also cleared. 

In step 510, configuration data corresponding to the 
present address of counter 312 is input into shared shift 
20 register 317 by way of the TDin link 306 in synchronism with 
the TScLK clock on line 307. At step 512 the input 
configuration data is written into the FLASH EE__NVIS array 
314 via parallel connection 316b. At step 514 the address 
counter 312 is incremented by strobing the SCLK line 301. If 
25 desired, shift register 317 may also be cleared at this time 
as a precaution. 

At step 515 the address in the address counter is tested 
to detect an end-of -write_space condition (meaning that the 
last location intended to be written into array 314 has been 
30 written into) . If the last location had not yet been written 
into, then at step 516 control is returned to step 510 by way 
of looping path 517, 

If the answer is yes at step 516, control passes to step 
518 wherein it is determined whether verification of the 
35 written data is desired. If the answer is no, an exit is 
taken at step 519. If the answer is yes, path 520 is 
followed to step 521. In step 521 the address counter 312 is 
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re-initialized to a verification start address. This can be 
done by resetting the address counter 312 or loading a 
verification start address by other means (e.g., shifting in 
a start address from line 306, through JTAG/ISPAV control 
5 engine 320 and into counter 312 by way of an initializing 
path, not shown in Fig. 3) . As a precaution in step 521, the 
shared shift register 317 may be cleared. 

At verification step 522, pre-written configuration data 
is transferred from FLASH EE__NVIS array 314 into shift 

10 register 317 by way of parallel path 316a, Once valid-read 
data is latched into the shared shift register 317, a next 
memory- address and data -read operation may begin even while 
register 317 is shifting out previous data. 

At verification step 523, the TScLK clock (307) is used 

15 to shift the read- and- latched data from register 317 by way 
of paths 371, 372 to an external testing system, where the 
external testing system (not shown) is coupled to TDout pii^ 
3 09. The external testing system may then be used to compare 
the data read out from FLASH EE_NVIS array 314 against an 

20 expected value and to thereby determine whether programming 
had properly occurred for the current address (328) now being 
output by address counter 312. 

At verification step 524, the SCLK line 301 is strobed 
to increment address counter 312 to the next address. At 

25 step 525 the next address is tested against a prespecified 
end-of -verify_space value or count. If the end of the 
verification space has not yet been reached, step 526 returns 
control to step 522 by way of looping path 527. The partial 
loop of steps 524, 525,. 526 plus the beginning of 522 may be 

30 carried out simultaneously with the execution of shift -out 
step 523. 

If at step 526 it is determined that the end of the 
verification space has been reached, path 528 is followed to 
exit point 519. Reconfiguration of the FPGA device 220 may 
35 then follow in a subsequent power-up sequence or in another 
reconfiguration sequence as desired. 
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Figs. 6A-6C illustrate various small-footprint 
packagings that may be used for CROP device 310 of Fig. 3. 

The 14 -pin dual-inline packaging (DIP) of Fig. 6A places VCC 
and GND in the standard pin 14 and pin 7 positions. The 
5 serial output data (311) is provided at pin 1. NC represents 
an unused pin. If desired, other functionalities may be 
provided by way of unused pins 8, 10 and 13. 

Fig. 6B illustrates a 20-pin dual-inline implementation 
for the packaging of the CROP device. Here, VCC and GND are 
10 positioned at the traditional pin 20 and pin 10 positions. 
The serial output data (311) is provided at pin 2. 
Additional functionalities may be provided by way of the 
unused pin positions: 1, 5, 9, ,11-13, 15-16 and 19, as 
desired, 

15 Fig. GC is a top plan view of an alternate four- sided 

packaging for the CROP device using a standard 20 -pin PLCC 
format. Other small -footprint formats are also within the 
contemplation of the invention, including single in-line 
packaging schemes . 

20 Fig. 7 illustrates a daisy-chain system 700 in which 

FPGA device 720 may be programmed by a series of ISPAV CROP 
devices 710a, 710b, etc., where one or more of the CROP 
devices 710a, 710b, etc., is in accordance with the design of 
Fig. 3. 

25 FPGA device 720 has a plurality of configuration-mode 

pins MO, Ml and M2 for establishing different configuration 
modes. When M0-M2 are all low, as indicated by grounding 
721, FPGA device 720 is in a so-called master serial 
configuration mode. 

30 Pin 722 (/PRGM) is a dedicated input pin of device 72 0 

which in a low level (logic 0) clears the entire 
configuration memory of FPGA device 720 and puts device 720 
is a WAIT state, ready to receive new configuration 
instructions. Transition to a high level on pin 722 starts 

35 an initialization and configuration process. If pin 722 is 
high during a power-up sequence, FPGA device 720 
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automatically clears its configuration memory and goes into 
a configuration restoration mode. 

DONE pin 723 is a. dedicated open collector pin which 
indicates with a low output that FPGA device 720 is in a 
5 configuration mode. A high output on pin 723 indicates that 
configuration is done and device 720 is ready to enter into 
a normal operational mode. The open-collector nature of DONE 
pin 723 allows multiple FPGA devices (720) to come on line in 
synchronism by tying the DONE pins of these FPGA devices 

10 together. The INIT pin 724 of the FPGA device has an open- 
collector output state in which FPGA device 720 may serve as 
a master for simultaneously beginning configuration of one or 
more slave FPGA devices (not shown) . As seen, the reset /OE 
inputs of CROP devices 710a, 710b, are coupled to the INIT 

15 pin 724 of the FPGA device. 

FPGA device 720 includes an internal clock oscillator 
(not shown) that may be configurably coupled to CCLK clock 
pin 725 when the FPGA device is in master mode. If FPGA 
device 720 is in slave mode, the CCLK pin 725 functions as an 

20 input pin for receiving a synchronizing clock from another 
device. As seen in Fig. 7, the FPGA device 720 is in master 
mode and the CCLK pin 725 outputs synchronizing clock signals 
to the SCLK inputs of CROP devices 710a, 710b, etc. 

DIN pin 726 is a multiplex 10 pin of FPGA device 720. 

25 During configuration, DIN pin 726 functions as an input for 
receiving serial data from a configuration-defining device. 

After configuration is complete, pin 726 may be used for 
user- I/O provided the user can avoid contention problems. 
This can be done because the SDATA pins of the CROP devices 

30 710a, 710b, etc., switch into a high impedance mode after 
configuration completes. 

Fig. 8 shows an alternate system 800 in which /PROGRAM 
line 822 drives the RESET/OE inputs of ISPAV CROP devices 
810a, 810b, etc. /LDC pin 827 is a multiplexed 10 pin of 

35 FPGA device 820 which goes low during configuration. As 
seen, in system 800, the /LDC pin 827 is used to drive the 
/CS pin of first CROP device 810a. 
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The above disclosure is to be taken as illustrative of 
the invention, not as limiting its scope or spirit. Numerous 
modifications and variations will become apparent to those 
skilled in the art after studying the above disclosure. 
5 By way of example, in a multi-chip module (MCM) 

embodiment such as that of Fig. 2B, the pins of one of 
Figs. 6A-6C may be added correspondingly to the MCM package 
in combination with pins of the associated FPGA B220 to 
provide the combined device, MCM 201 having only a few more 

10 pins than that of FPGA B220 taken alone. Pins VCC, GND of 
Figs. 6A-6C may be left out from the MCM combination since 
FPGA B220 has such power pins already. Pin SDATA of Figs. 6A- 
6C may be further left out from the MCM combination since the 
serial-out function (311) is to be carried out internally 

15 within the MCM package. PIN SCLK of Figs. 6A-6C may be 
further left out from the MCM combination if FPGA B220 
already has such a clock receiving or producing node. 

By way of further example of alternatives, it should be 
noted that although the above discussion has been directed 

20 specifically reconfiguration of FPGA's with volatile 
configuration memories, it is possible to have other kinds of 
volatilely-conf igured PLD's such as CPLD's with volatile 
configuration memories and to use the Configuration-Restoring 
On Power-up principles described above for supporting in- 

25 system programming and verification of such other, 
volatilely-conf igured. Programmable Logic Devices. 

Given the above disclosure of general concepts and 
specific embodiments, the scope of protection sought is to be 
defined by the claims appended hereto. 
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[Note: Bracketed bold and italicized cross- 

5 referencing text is provided in the below claims as 

an aid for readability and for finding 
corresponding (but not limiting) support in the 
specification. The bracketed text is not intended 
to add any limitation whatsoever to the claims and 
10 should be deleted in all legal interpretations of 

the claims and should also be deleted from the 
final published version of the claims.] 

1. A configuration restoring device [210] for 

15 providing configuration instructions to a to-be-configured 
device [220] , said restoring device comprising: 

(a) an electrically erasable and reprogrammable, 
nonvolatile integrated storage array (EE_NVIS array) [214,314] 

for storing configuration instructions; and 
20 (b) a serial interface circuit [217] , wherein the 

serial interface circuit includes: 

(b.l) a first, bidirectional coupling [215] to the 

EE_NVIS array [214] by way of which configuration 

instructions can be bidirectionally transferred between 
25 the EE_NVIS array and the serial interface circuit; 

(b.2) a first serial output [211] by way of which 

configuration instructions can be serially output to the 
to-be-configured device [220] ; and 

(b.3) a serial input [270] by way of which 

3 0 configuration instructions can be input to the serial 

interface circuit for subsequent transfer by way of the 
first, bidirectional coupling [216] from the serial 

interface circuit [217] to EE_NVIS array [214] . 
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2 . The configuration restoring device of Claim 1 
wherein the EE_NVIS array [314] includes: 

(a.l) FLASH memory cells. 

3 . The configuration restoring device of Claim 1 
5 wherein: 

(a.l) said memory cells of the EE_NVIS array [3i4] can 
be erased by a Fowler- Nor dheim tunneling mechanism. 

4. The configuration restoring device of Claim 1 
wherein the EE_NVIS array [314] includes: 

10 (a.l) single-transistor memory cells each capable of 

storing at least one logic bit. 

5. The configuration restoring device of Claim 4 
wherein said single-transistor memory cells are each capable 
of storing plural logic bits . 

15 6. The configuration restoring device of Claim 1 

wherein the EE_lsrviS array [314] is programmable and erasable 

with monopolarity power supply voltages of about 5 Volts or 
less. 

7. The configuration restoring device of Claim 1 
20 wherein the serial interface circuit [217] further includes: 

(b.4) a second serial output [271] by way of which data 

stored in the EE__NVIS array [214] can be serially output for 

verification. 

8. The configuration restoring device of Claim 7 
25 wherein: 

(b.4a) the combination of the first serial input [270] 

and the second serial [271] are embeddable within a serial 

shift chain [247a, 275a] for serially continuing transmission 

of data through the serial shift chain. 
30 9. The configuration restoring device of Claim 8 

wherein the serial shift chain [247a, 275a] is a JTAG- compatible 

testing chain. 
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10- The configuration restoring device of Claim l 

wherein the to-be-configured device [220] includes a field 
programmable, Programmable Logic Device (PLD) with a volatile 
configuration memory [225] of at least one million 
5 configurable bits and the EE_NVIS array [214] has sufficient 
storage capacity to store all configuration instructions that 
are loadable into said configuration memory [225] . 

11. The configuration restoring device of Claim 1 

wherein: 

10 the to-be-configured device further includes both a 

volatile configuration memory [225] and initially- 
configurable registers [226] where said combination of 
volatile configuration memory and configurable registers 
includes more than one million configurable bits; and 

15 the EE_NVIS array [2141 has sufficient storage capacity 

to store all configuration instructions that are loadable 
into both the volatile configuration memory [225] and the 

initially-configurable registers [226] of said to-be- 
configured device. 
20 12. The configuration restoring device of Claim 1 

wherein: 

the to-be-configured device includes both a volatile 
configuration memory [225] and volatile embedded memory [226] 

that may be initially loaded with data where said combination 
25 of volatile configuration memory and volatile embedded memory 
includes more than two million configurable bits; and 

the EE_NVIS array [214] has sufficient further storage 
capacity to store all configuration instructions that are 
loadable into both the volatile configuration memory [225] 

30 and the into the embedded memory of said to-be-configured 
device . 

13 . The configuration restoring device of Claim 1 

further comprising: 
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(c) a power-up detecting interface [207] , operatively 

coupled to said serial interface circuit [217] , for detecting 

a power-up sequence and for responsively initiating a 
transfer of stored configuration instructions from the 
EE_NVIS array [214] to the first serial output [211] by way of 

the serial interface circuit. 

14 . The configuration restoring device of Claim 13 
further comprising: 

(d) a protective packaging [Figs.eB-c] having no more than 

20 terminals for providing electrical connections between 
interior and exterior portions of the protective packaging, 
(d.l) wherein the protective packaging houses said 

EE_NVIS array [214] , said serial interface circuit [217] , 

and said power-up detecting interface [207] , and 

(d.2) wherein the no more than 20 terminals include: 

(d.2a) a first terminal [vcc] for carrying power 

into the interior portion of the protective 
packaging, 

(d.2b) a second terminal [sdata] by way of which 

said configuration instructions can be serially 
output from the first serial output [211] to the 

to-be-configured device [220] ; and 

(d,2c) a third terminal [roj] by way of which said 

configuration instructions can be input to the 
serial interface circuit for subsequent transfer to 
EE_NVIS array. 

15. A configuration restoring device [310] comprising: 

(a) an Electrically Erasable and reprogrammable, 
Nonvolatile Integrated Storage (EE_NVIS) array [5i4] for non- 

volatilely storing configuration restoring data in 
addressable locations [328] ; 

(b) an addressing sequencer [312] for sequencing the 
EE_NVIS array through a set of said addressable locations; 
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(c) a shared shift register [317] that is 
bidirectionally coupled to the EE_NVIS array for receiving 
and storing data [3i6a] read out from the EE_NVIS array [314] 

and for writing configuration restoring data [3i6b] into the 

5 EE_NVIS array, the shared shift register being further 
coupled [318] to serially shift out data stored in the shared 

shift register; and 

(d) a control engine [320] , operatively coupled to the 

shared shift register [317] , for loading configuration 

10 restoring data [370] into said shift register from a serial 

shift chain [306,369] . 

16. The configuration restoring device of Claim 15 

wherein the EE_NVIS array [314] includes: 

(a.l) FLASH memory cells. 

15 17. The configuration restoring device of Claim 15 
wherein: 

(a.l) memory cells of the EE_NVIS array [314] can be 

erased by a Fowler-Nordheim tunneling mechanism. 

18. The configuration restoring device of Claim 15 
20 wherein the EE_NVIS array [314] includes: 

(a.l) single- transistor memory cells each capable of 

storing at least one logic bit. 

19. The configuration restoring device of Claim 15 
wherein: 

25 (a.l) the EE_NVIS array [314] is organized to output in 

parallel [3i6a] an addressed one of 2^ storage words [328] 

where the output storage word is m bits wide [316] , m is an 

integer equal to or greater than 4, and n is an integer equal 
to or greater than 16. 
30 20. The configuration restoring device of Claim 19 

wherein: 

(a. la) m is an integer equal to or greater than 8 such 
that each output storage word is at least 8 bits wide. 
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21. The configuration restoring device of Claim 19 
wherein: 

(a. la) n is an integer equal to or greater than 20 such 
that there are at least 1,048,576 addressable storage words. 

5 

22. The configuration restoring device of Claim 15 
wherein the EE_NVIS array has an address -receiving input 
port [a^^] and the addressing sequencer includes: 

(b.l) a clock input [30i] for receiving a sequencing 
10 clock signal [sclk] ; and 

(b.2) a counter [312] capable of sequencing through the 

addressable locations of the EE_NVIS array in synchronism 
with said sequencing clock signal, said counter having a 
count output [328] operatively coupled to the address - 
15 receiving input port A^^ of the EE_NVIS array. 

23. The configuration restoring device of Claim 22 
wherein: 

(c.l) the shared shift register [317] has a shared 

clock input driven by a clock selector [360] and the clock 

20 selector is controllable [364] to selectively provide to the 

shared clock input either said sequencing clock signal [sclk] 

or another of one or more alternatively selectable clock 
signals [307,363] . 

24 . The configuration restoring device of Claim 23 
25 wherein: 

(d.l) the control engine [320] is operative in 

synchronism with a test subsystem clock [307] of the serial 

shift chain [306,369] ; and 

(c.2) the test subsystem clock is one of said 

30 alternatively selectable clock signals that can be 

selectively provided to the shared clock input of the shared 
shift register [317] . 
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25. The configuration restoring device of Claim 24 

wherein: 

{d.2) the control engine [320] is responsive to a test 

modes selecting control signal [308,tms] of the serial shift 

5 chain [306,369] ; and 

(d.3) the control engine supplies clock selection 
control signals [354] to control the selection made by the 

clock selector [360] in accordance with a mode selected by 

said test modes selecting control signal [308] . 

10 26. The configuration restoring device of Claim 15 

wherein said shared shift register [317*1 comprises: 

(c.l) a parallel input bus [3i6a0-m*] for receiving in 

parallel said data [3i€a] read out from the EE_NVIS array; and 

{c.2) a parallel output bus [3i6bo-m*] for outputting in 

15 parallel said configuration restoring data [3i6b] that is to 

be written into the EE_NVIS array. 

27. The configuration restoring device of Claim 26 
wherein said shared shift register [317'] further comprises: 

(c.3) a serial input line [370 '1 by way of which the 

20 control engine [320] can serially load said configuration 

restoring data into said shift register from the serial shift 
chain. 

28. The configuration restoring device of Claim 15 
wherein at least the EE_NVIS array [314] , the addressing 

25 sequencer [312] , and the shared shift register [317] are 

provided within a same integrated circuit [310] . 

29. The configuration restoring device of Claim 15 
further comprising: 

(e) a three -state output driver [3i$] having an input 
3 0 coupled to receive the serially shifted out data from the 
shared shift register and an output [311] that may be 

switched into a high- impedance state. 
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30. The configuration restoring device [310] of 
Claim 29 further comprising: 

(f ) a device selecting input [302, /cs] ; and 

(g) decoding logic [350] responsive to the device 

5 selecting input and coupled to control said three -state 
output driver [319] ; 

wherein the decoding logic switches the output [3ii] of 

the three -state output driver into the high- impedance state 
when a device deselecting signal is applied to said device 
10 selecting input [302, /cs] , 

31. The configuration restoring device [3lo] of 

Claim 30 further wherein: 

(g.l) said decoding logic is coupled [322] to the 

addressing sequencer [312] ; 

15 wherein the decoding logic switches the addressing 

sequencer into an inactive mode when said device deselecting 
signal is applied to the device selecting input [302, /cs] . 

32. A method [500] for providing in-system 

programming and verification of a configuration restoring 
20 device, wherein the configuration restoring device includes: 

(a) an electrically erasable and reprogrammable, 
nonvolatile integrated storage array (EE_NVIS array) [214,314] 

for storing configuration instructions; and 

(b) a serial interface circuit [217] , wherein the 

25 serial interface circuit has: 

(b.l) a first, bidirectional coupling [216] to the 

EE_NVIS array [214] by way of which configuration 

instructions can be bidirectionally transferred between 
the EE_NVIS array and the serial interface circuit; 
30 {b.2) a first serial output [211] by way of which 

configuration instructions can be serially output to a 
to-be-configured device [220] ; 

(b.3) a serial input [270] by way of which 

configuration instructions ■ can be input to the serial 
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interface circuit for subsequent transfer by way of the 
first, bidirectional coupling I216] from the serial 

interface circuit [217] to EE_NVIS array; and 

{b.4) a second serial output [271] by way of which 

5 data can be serially output from the serial interface 

circuit for verification; 
said programming and verification method comprising the steps 
of: 

(c) first shifting [sio] configuration instructions into 
10 the serial input [270] of the serial interface circuit; 

(d) first transferring [512] by way of the bidirectional 
coupling [216] , the shifted-in configuration instructions 
into the EE_NVIS array [214] for storage in the EE_NVIS 
array; 

15 (e) second transferring [522] by way of the 

bidirectional coupling [2l€] , stored data from the EE_NVIS 
array to the serial interface circuit; and 

(f ) second shifting the stored data transferred by said 
second transferring step to the second serial output [271] 

20 for verification of said stored data. 

33. An end-use system [2001 comprising: 

(a) an in-system reconf igurable, programmable logic 
device (PLD) [220] ; and 

(b) an in-system reconf igurable, restoring device [210] , 

25 where the restoring device is operatively coupled to the PLD 
for restoring configuration instructions of the PLD, and 
where the restoring device comprises : 

(b.l) an electrically erasable and reprogrammable, 
nonvolatile integrated storage array (EE_NVIS array) [214,314] 
30 for storing configuration instructions; and 

(b.2) a serial interface circuit [217], wherein the 
serial interface circuit includes : 

{b.2a) a first, bidirectional coupling [216] to 

the EE_NVIS array [214] by way of which configuration 
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instructions can be bidirectionally transferred between 
the EE_NVIS array and the serial interface circuit; 

(b.2b) a first serial output [211] by way of which 

configuration instructions can be serially output to the 
5 to-be-configured device [220] ; and 

{b.2c) a serial input [270] by way of which 

configuration instructions can be input to the serial 
interface circuit for subsequent transfer by way of the 
first, bidirectional coupling [215] from the serial 

10 interface circuit [217] to EE_NVIS array [214] . 

34. The end-use system [200] of Claim 33 wherein: 

the PLD includes a volatile configuration memory [225] ; 

and 

the EE_NVIS array [314] of the restoring device includes 

15 FLASH memory cells. 

35. The end-use system [200] of Claim 33 wherein said 

serial input [270,305] is part of a 4 -wire interface further 
comprising: 

(b.2d) a second serial output [271, bos'] by way of which 

20 stored configuration instructions can be serially output for 
verification; 

(b.2e) a serial clock input [307] for receiving clock 

signals of said 4 -wire interface; and 

(b.2f) a mode input [308] for receiving mode -control 

25 signals of said 4 -wire interface. 

36. The end-use system [200] of Claim 35 wherein said 

4-wire interface is a JTAG interface. 

37. A configuration restoring device [310] for 

providing configuration instructions to a to-be-configured 
30 device [220], said restoring device comprising: 

(a) an electrically erasable and reprogrammable, 
nonvolatile integrated storage array (EE_NVIS array) having 
FllASH memory cells [314] for storing configuration 

instructions; and 
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(b) a JTAG interface circuit [217] by way of which 

configuration instructions can be transferred for in-system 
programming of the EE_NVIS . array . 

38. A configuration restoring device [310] according to 

5 Claim 37 wherein said JTAG interface circuit further provides 
a means by way of which data programmed into the EE_NVIS 
array may be extracted from the EE_NVIS array for in-system 
verification. 

39. A configuration restoring device [310] according to 

10 Claim 37 wherein said FLASH memory cells can store at least 
2 Megabits (2Mb) of data. 
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